CVE-2021-43028: Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-43028?
CVE-2021-43028 is a memory corruption vulnerability in Adobe Premiere Rush version 1.5.16 (and earlier) that allows arbitrary code execution.
How does CVE-2021-43028 occur?
CVE-2021-43028 occurs due to insecure handling of a malicious M4A file in Adobe Premiere Rush.
What is the severity of CVE-2021-43028?
CVE-2021-43028 has a severity rating of 7.8, which is considered critical.
How can CVE-2021-43028 be exploited?
To exploit CVE-2021-43028, user interaction is required, such as opening a malicious M4A file.
Is Microsoft Windows affected by CVE-2021-43028?
No, Microsoft Windows is not affected by CVE-2021-43028.